added functional groups api + started pictures

src/api/pictures.py

@@ -0,0 +1,103 @@
+from typing import Annotated
+
+from fastapi import APIRouter, Depends, HTTPException, status
+from psycopg2._psycopg import connection
+
+import db.pictures as db
+import settings.settings as settings
+from api.models import Picture, User
+from api.utils import get_current_user
+from db.internal import get_db_connection
+
+pictures_router = APIRouter(prefix="/api/pictures", tags=["pictures"])
+
+
+# maybe to delete
+@pictures_router.post("/picture/url")
+async def read_picture_by_url(
+    groupname: str,
+    conn: Annotated[connection, Depends(get_db_connection)],
+    current_user: Annotated[User, Depends(get_current_user)]
+):
+    picture = Picture()
+    picture_data = db.get_picture_by_url(conn, groupname)
+    if picture_data is None:
+        return HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="No such picture",
+        )
+    picture.fill(picture_data)
+    return picture
+
+
+@pictures_router.post("/picture/id")
+async def read_picture_by_id(
+    groupname: str,
+    conn: Annotated[connection, Depends(get_db_connection)],
+    current_user: Annotated[User, Depends(get_current_user)]
+):
+    picture = Picture()
+    picture_data = db.get_picture_by_id(conn, groupname)
+    if picture_data is None:
+        return HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="No such picture",
+        )
+    picture.fill(picture_data)
+    return picture
+
+
+@pictures_router.post("/add")
+async def add_picture(
+    conn: Annotated[connection, Depends(get_db_connection)],
+    current_user: Annotated[User, Depends(get_current_user)],
+    source: str,
+    external_id: str,
+    url: str,
+    metadata: dict
+):
+    if not settings.settings.allow_create_pictures and current_user.role not in settings.settings.admin_roles:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Not allowed",
+        )
+
+    # if db.check_picture_existence(conn, groupname):
+    #     raise HTTPException(
+    #         status_code=status.HTTP_409_CONFLICT,
+    #         detail="Picture already exists",
+    #     )
+
+    return {
+        "id": db.create_picture(conn, source, external_id, url, metadata)
+    }
+
+
+# maybe to delete
+@pictures_router.post("/delete/url")
+async def delete_picture_by_url(
+    picture_url: str,
+    conn: Annotated[connection, Depends(get_db_connection)],
+    current_user: Annotated[User, Depends(get_current_user)]
+):
+    if current_user.role in settings.settings.admin_roles:
+        return db.delete_picture_by_url(conn, picture_url)
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Not allowed",
+        )
+
+@pictures_router.post("/delete/id")
+async def delete_picture_by_id(
+    picture_id: int,
+    conn: Annotated[connection, Depends(get_db_connection)],
+    current_user: Annotated[User, Depends(get_current_user)]
+):
+    if current_user.role in settings.settings.admin_roles:
+        return db.delete_picture_by_id(conn, picture_id)
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Not allowed",
+        )